Bots and agents should identify themselves via Web Bot Auth
What's changing Shopify now applies stricter rate limits to bots and agents that access the Storefront API and Shopify-hosted online store pages. Bots and agents that don't sign their requests are subject to the strictest limits. To qualify for higher rate limits, operators should sign their requests with Web Bot Auth.
Also shipped May 7, 2026Shopify in May 2026 →
Security Center 2.0: Act on vulnerabilities in bulk across all your apps
Replit updated its Security Center to allow users to view and remediate vulnerabilities across all projects in bulk. Users can now identify and fix critical CVEs on published projects from a centralized dashboard.
Consistent Web Search and Fetch Across Every Model
OpenRouter now enables tool-calling models to perform web searches and fetch page content. Users can choose from multiple search and fetch engines to integrate these capabilities into their workflows.
Prisma 8: A Call for Extension Authors
Prisma 8 features a modular core that allows developers to build and integrate extensions for specific databases, vector search, and JSON-with-schema.
Gemini 3.1 Flash-Lite now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite model is now available through Netlify’s AI Gateway with zero configuration required. The Preview version of this model was available as of March 3, 2026. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Monitors & Alerts , Now Generally Available
We’ve updated how you build alerts - separated now into Monitors and Alerts - to give you more control over what you track and how your team gets notified.
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel...
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel files, both in the MotherDuck UI and in embedded Dives . Wire up exports from your Dive code with the new exportAs and useExport hooks from @motherduck/react-sql-query .
More from Shopify developer platformEvery Shopify developer platform release →
Publish and unpublish product variants independently from product
ProductVariant is now a Publishable . Variants can be published or unpublished per publication (channel or catalog) in API version 2026-07, giving merchants , and your apps , fine-grained control over where each variant is visible without deleting variants, duplicating products, or hiding them via storefront code.
Target discounts to specific markets
We've introduced markets as a new option in DiscountContextInput , enabling you to target discounts to specific regional markets, retail locations, or B2B company locations. This option can be used alongside existing eligibility options such as all , customerSegments , and customers .
App deployment in CI/CD is now available for all apps
App deployment in CI/CD is now available for all apps through app automation tokens on the Dev Dashboard. These tokens offer app-scoped authentication, allowing you to use the latest Shopify CLI to automate app releases in GitHub Workflows and similar tools.
Ship and pickup in one order now available in feature preview
Shopify Plus and Enterprise merchants will soon be able to enable a single checkout experience where customers can choose both shipping and store pickup within the same order. Previously, customers had to place separate orders for each delivery method. This change impacts how delivery and fulfillment information flows through checkout.
More admin intents now support Settings
Seven new Settings intents let apps open editors for notifications, payment capture, gift cards, delivery profiles, and business details. This builds on the initial Settings intents release from March.
Add actor field to subscription contract and billing attempt mutations
We have introduced a new actor field in subscription mutations to help you track who initiated an action - whether it was the customer, the merchant, or the partner app's automated system. You can now include an actor argument when creating billing attempts or editing subscription contracts.
Default value of `appliesOnSubscription` changed to `true` for app discount inputs
The default value of appliesOnSubscription has been changed from false to true on the DiscountCodeAppInput and DiscountAutomaticAppInput input types in GraphQL Admin API. No action is required. This default value change has no effect on how discounts are applied at checkout.
Shopify App Pricing: charge for usage, recurring subscriptions, or both
Shopify App Pricing supports subscriptions, usage-based charges, or combined models, configured in the Partner Dashboard. What's new: Managed Pricing is now Shopify App Pricing Shopify App Pricing replaces Managed Pricing as Shopify’s default billing solution that gets configured during app submission in the Partner Dashboard.